$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12529314-6d08-4e66-add0-0a0844e377eb.roa File: 12529314-6d08-4e66-add0-0a0844e377eb.roa (raw, json) Hash identifier: C3gS6Y/3lThXNNtFCNs26597xa3zor8lEYW7lz8grDY= Subject key identifier: 13:69:E1:07:CD:E1:6C:5A:C6:74:50:1C:4C:18:6B:FF:5A:53:E1:D5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5D10DAF08AAC2814B98257E0C85E8589E8618720 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12529314-6d08-4e66-add0-0a0844e377eb.roa Signing time: Mon 20 Oct 2025 09:01:23 +0000 ROA not before: Mon 20 Oct 2025 09:01:23 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:10:da:f0:8a:ac:28:14:b9:82:57:e0:c8:5e:85:89:e8:61:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 09:01:23 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=21b66e1271ee163ebb9a9b8b132dfec59f229b8b8f13a5034cf7bfbd160052d0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:67:e6:58:64:d4:86:a2:ff:22:df:2d:20: 0f:af:b9:7c:6a:8a:4b:71:c8:2a:27:e9:94:28:1d: 57:b2:c2:50:0f:a9:22:59:ee:69:07:9a:9a:9a:72: 3c:44:81:48:04:44:46:60:31:bd:d0:6c:9b:99:d7: fc:ff:77:ae:59:a8:2a:24:14:dc:f4:f0:5c:7e:92: e2:29:1a:37:8f:c6:05:c0:74:b9:6d:2d:85:9f:bc: c2:a4:ec:f3:98:5e:11:13:6f:60:17:b4:70:cb:d9: 19:81:18:70:3c:d6:eb:f4:25:f0:16:d6:aa:ab:fa: f3:c4:02:71:3c:f3:3a:9d:c4:f8:db:44:3c:42:7d: 3e:6b:9f:63:1b:f7:d5:12:4e:f7:b9:c0:2e:a2:b4: b8:e2:f5:d6:ba:fc:94:20:a1:e4:40:2e:47:f1:47: 18:a4:8b:9d:83:91:90:79:cf:ba:90:e2:d4:5a:78: 0b:4f:c8:c9:a6:60:c5:8d:11:65:b8:83:c5:1d:c8: d6:ee:fd:13:10:3b:6c:7a:79:0a:2e:96:7e:4b:25: 1d:e3:45:ff:8f:fc:5c:19:1b:66:8a:bb:c6:21:fa: 76:ee:4d:a8:49:f8:96:37:ee:01:f2:cf:6c:1c:4d: 54:3c:67:35:34:57:0c:75:32:54:40:6c:8c:f0:b9: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:69:E1:07:CD:E1:6C:5A:C6:74:50:1C:4C:18:6B:FF:5A:53:E1:D5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12529314-6d08-4e66-add0-0a0844e377eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.34.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:c5:af:ff:1a:bb:25:0b:8d:a6:e8:7b:3e:31:4f:15:80:c7: a8:e2:3f:28:94:d5:f3:2c:11:cf:f9:b2:a4:36:24:4b:8e:fa: 66:96:4a:9b:3a:e3:ae:33:16:9d:c8:46:aa:b1:c6:88:da:71: ad:0a:ca:8f:3a:5b:ea:89:af:72:74:d7:29:96:7d:c1:da:be: bd:a7:41:5e:0d:81:59:6c:b7:78:53:72:02:2e:58:a4:72:75: dc:31:54:cf:cd:b5:da:b6:13:bd:90:a4:d4:bb:c2:21:6d:5e: b6:43:1c:f8:d7:d4:66:a7:94:98:dd:50:51:33:c6:0b:2f:2c: 68:39:2a:5d:dc:ac:64:89:6e:1f:60:56:09:95:20:c9:32:ce: 77:3e:ac:77:74:c3:b4:be:d1:92:4d:3a:ac:ad:30:1b:89:d9: fc:d2:c7:de:26:a0:af:e2:2d:75:f1:93:b0:e8:28:1f:87:d3: 8f:cf:4c:84:b2:be:03:3b:ca:ef:7d:b2:1b:fa:bd:f6:d5:87: 8e:5a:20:fd:5a:8f:af:19:cd:e5:6d:70:ef:4e:ab:63:c8:64: 23:b5:96:24:f6:d7:06:47:96:3b:b7:81:09:66:dc:f9:39:03: 6c:a6:d3:d5:14:03:99:d6:bf:ef:73:55:3e:98:3e:9e:81:c4: 26:7c:93:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXRDa8IqsKBS5glfgyF6FiehhhyAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDkwMTIzWhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMWI2NmUxMjcxZWUxNjNlYmI5YTliOGIxMzJkZmVjNTlm MjI5YjhiOGYxM2E1MDM0Y2Y3YmZiZDE2MDA1MmQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfFmfmWGTUhqL/It8tIA+vuXxqiktxyCon6ZQoHVeywlAP qSJZ7mkHmpqacjxEgUgEREZgMb3QbJuZ1/z/d65ZqCokFNz08Fx+kuIpGjePxgXA dLltLYWfvMKk7POYXhETb2AXtHDL2RmBGHA81uv0JfAW1qqr+vPEAnE88zqdxPjb RDxCfT5rn2Mb99USTve5wC6itLji9da6/JQgoeRALkfxRxiki52DkZB5z7qQ4tRa eAtPyMmmYMWNEWW4g8UdyNbu/RMQO2x6eQouln5LJR3jRf+P/FwZG2aKu8Yh+nbu TahJ+JY37gHyz2wcTVQ8ZzU0Vwx1MlRAbIzwubIxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE2nhB83hbFrGdFAcTBhr/1pT4dUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyNTI5MzE0LTZkMDgtNGU2Ni1hZGQwLTBhMDg0NGUzNzdlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoCIwDQYJKoZIhvcNAQELBQADggEBAJzFr/8auyULjaboez4xTxWAx6ji PyiU1fMsEc/5sqQ2JEuO+maWSps6464zFp3IRqqxxojaca0Kyo86W+qJr3J01ymW fcHavr2nQV4NgVlst3hTcgIuWKRyddwxVM/Ntdq2E72QpNS7wiFtXrZDHPjX1Gan lJjdUFEzxgsvLGg5Kl3crGSJbh9gVgmVIMkyznc+rHd0w7S+0ZJNOqytMBuJ2fzS x94moK/iLXXxk7DoKB+H04/PTISyvgM7yu99shv6vfbVh45aIP1aj68ZzeVtcO9O q2PIZCO1liT21wZHlju3gQlm3Pk5A2ym09UUA5nWv+9zVT6YPp6BxCZ8kx4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:47:51 2025 by rpki-client